SQL injection vulnerability in thread.php in Woltlab Burning Board (WBB) 2.2.2 allows remote attackers to execute arbitrary SQL commands via the threadid parameter.Referenceshttp://securityreason.com/securityalert/1143http://www.securityfocus.com/archive/1/437114/100/100/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/27138